project-boundary

Security hook that blocks destructive commands and file operations outside the project directory